On 5/17/2016 9:56 PM, Peter wrote:
Is it always possible to identify the product name by looking through the
load modules.
No.
Here in our shop there are some DATASET lying where we do not
have any clue to which product it belongs to.
Any pointers or ideas to know the product name by
Hello
Is it always possible to identify the product name by looking through the
load modules. Here in our shop there are some DATASET lying where we do not
have any clue to which product it belongs to.
Any pointers or ideas to know the product name by looking through the
module ?
Any
That would account for it. I knew there were continuation records and I had
read that paragraph but because I am only focused on the completion section
I saw it as a missing completion section; I did not think "continuation."
Thanks,
Charles
-Original Message-
From: IBM Mainframe
Yes. When I go to port 443 I also see the correct chain:
openssl s_client -debug -connect dispby-117.boulder.ibm.com:443 -state
SSL_connect:SSLv3 read finished A
---
Certificate chain
0 s:/C=US/ST=New York/L=Armonk/O=INTERNATIONAL BUSINESS MACHINES
CORPORATION/CN=deliverycb-bld.dhe.ibm.com
On 18/05/2016 0:53, John Eells wrote:
- Added support for both SHA-2 (SHA-256) and 2048-bit RSA certificates.**
- Put the package signing verification certificate where "anyone could
get it"
- Made the signing (certificate-based) check optional.
- Continued to keep the integrity checking
On 5/17/2016 7:10 PM, Charles Mills wrote:
From time to time I see SMF 30 subtype 4 and 5 records with no completion
section. Kind of an oxymoron: a step or job completion record with no
completion section.
Can anyone educate me on what that would indicate? How would one "interpret"
such a
Thanks to everyone,
First let me say ECBDIC was not a consideration, since if I ever had to
access my home mainframe from overseas it would most likely be with my own
laptop with security of my choice, not what a hotel or cyber cafe
provides. But using the solution I think I have found a local
>From time to time I see SMF 30 subtype 4 and 5 records with no completion
section. Kind of an oxymoron: a step or job completion record with no
completion section.
Can anyone educate me on what that would indicate? How would one "interpret"
such a record?
FWIW, I am looking at one now. Record +
The new GeoTrust Global CA is serial# 023456, expiration 5/20/2022.
The old GeoTrust Global CA is serial# 12bbe6, expiration 8/20/2018.
At +5eF in the server cert chain being sent out, there is "12 bb e6".
05d0 - 25 b0 68 f9 de 08 5a f3-29 cc d4 92 00 03 81 30 %.h...Z.)..0
05e0 - 82 03 7d
John,
I don't think you have the right GeoTrust certificate on your server.
The server is sending out this cert chain:
Certificate chain
0 s:/C=US/ST=New York/L=Armonk/O=INTERNATIONAL BUSINESS MACHINES
CORPORATION/CN=deliverycb-bld.dhe.ibm.com
i:/C=US/O=GeoTrust Inc./CN=GeoTrust SSL CA -
Create a profile or group named ADMIN, add some users to it, and list
that out for the auditors whenever they ask.
Best case, they will fall for it and you're done. Worst case, you have
a spot (like a paper list but in RACF where it looks more legitimate)
where you at least have a chance of
Where is your SYSEXEC and/or SYSPROC
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
Behalf Of Ted MacNEIL
Sent: Tuesday, May 17, 2016 3:22 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: JCL "COMMAND" statements - Follow-up question
OC is part of
OC is part of OPS/MVS. So you need to look in its libraries.
-teD
Original Message
From: Jeremy Nicoll
Sent: Tuesday, May 17, 2016 07:30
To: IBM-MAIN@LISTSERV.UA.EDU
Reply To: IBM Mainframe Discussion List
Subject: Re: JCL "COMMAND" statements - Follow-up question
On Tue, 17 May 2016, at
Faster & cheaper than FLASH, supposedly. Only mentions Power arch in the
article I found.
http://www.prnewswire.com/news-releases/ibm-scientists-achieve-storage-memory-breakthrough-300269117.html
--
The unfacts, did we have them, are too imprecisely few to warrant our
certitude.
Maranatha!
On 16 May 2016 at 15:47, Jerry Whitteridge
wrote:
> I'd reply to the Auditor "Please define Admin access as there is no one
> privilege that grants all access"
But there are several -- perhaps many -- privileges that grant access
to grant all access. For
In TCPPROF (data set pointed to by PROFILE DD in the TCPIP PROC)
See the "AUTOLOG" section, this is out and as you can see it is all commented
out, so we start ours externally.
AUTOLOG
; FTPD JOBNAME FTPD1 ; FTP Server
; WEBSRV; WWW Server
; SMTP
An interesting take on ADDSD. We produce a periodic report here on userids with
'elevated access', which includes SPECIAL, OPERATIONS, and AUDITOR (the benign
type). OPERATIONS cannot grant privileges but could do a lot of damage. I
consider AUDITOR vital for sysprogs in order to diagnose--not
On 5/17/2016 10:55 AM, John Eells wrote:
So...suppose we were to do something like this*:
- Added support for both SHA-2 (SHA-256) and 2048-bit RSA certificates.**
- Put the package signing verification certificate where "anyone could
get it"
- Made the signing (certificate-based) check
Ed Jaffe wrote
>We've been able to call fairly large 31-bit programs in 64-bit mode
>...
>Most SVC and PC-based services, such as STORAGE
>OBTAIN/RELEASE, etc. can be called with no ill effects.
I will state the obvious. "no ill effects" that are observed does not mean
that there are none, and
A major clue that 'OC' is not an exec is the absence of SYSPROC or SYSEXEC in
the job stream. That pretty much indicates a load module somewhere in linklist
or LPA. There are tools previously discussed here to track down such a module.
.
.
.
J.O.Skip Robinson
Southern California Edison Company
On Tue, May 17, 2016 at 9:41 AM, Mike Schwab
wrote:
> Any ID that can grant privileges to another ID.
>
By the above definition, _every_ id in RACF which has TSO capability is an
administrator. How? Suppose that I am BUBBA. I log into TSO. I issue the
commands:
ADDSD
Although I know little about TCP/IP, I'd like represent the automation
viewpoint. Although a task can be started in various ways, including (for some)
an option in SSN or (for most) a command in SYS1.PARMLIB, only a task started
by 'automation' (SA, for example), can be managed by automation
Ravi,
A sample input and desired output would have helped. Your description of
the problem is too vague. Either way as Martin pointed out DFSORT Joinkeys
will give you the desired results.
Check out the Smart DFSORT tricks on Joinkeys which is what you need
Join fields from two files on a key
I think you've got it - with the key being that you support SHA-2/256 and RSA
and thus SHA-1 is not required
--
Lionel B. Dyck (Contractor)
Mainframe Systems Programmer
Enterprise Infrastructure Support (Station 200)
So...suppose we were to do something like this*:
- Added support for both SHA-2 (SHA-256) and 2048-bit RSA certificates.**
- Put the package signing verification certificate where "anyone could
get it"
- Made the signing (certificate-based) check optional.
- Continued to keep the integrity
>There are manuals for DFSMSdss that should be helpful on the ibm website.
ADR and ADRY messages are documented "z/OS MVS System Messages Volume 1 (ABA -
AOM).
As obvious as can be, isn't it?
--
Peter Hunkeler
--
For
Any ID that can grant privileges to another ID.
On Mon, May 16, 2016 at 2:47 PM, Jerry Whitteridge
wrote:
> I'd reply to the Auditor "Please define Admin access as there is no one
> privilege that grants all access"
>
> Jerry Whitteridge
> Manager Mainframe
Many ways to skin the cat. Your way works fine too, and is one less line of
code :)
_
Dave Jousma
Assistant Vice President, Manager, Mainframe Engineering
david.jou...@53.com
1830 East Paris, Grand Rapids, MI 49546 MD RSCB2H
p
On 2016-05-16, at 13:08, Jousma, David wrote:
> ...
> exit
>
>
> /* Allocate results output file */
Have you contacted the ISV to see if they use it? I am not sure, that as a
general rule, a module or function would be used by a particular ISV. But that
the ISV could tell you if they use it.
What problem are you trying to solve with this question?
If you are trying to determine levels of
Hi,
Does GIMSXID used for other ISV products to know the current Maintenance
level and to order based on the Utility Output ?
Jake
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to
Have you done any internet searches on the messages to see what these fields
mean?
Have you gone to www.ibm.com and searched on the messages?
There are manuals for DFSMSdss that should be helpful on the ibm website.
Lizette
> -Original Message-
> From: IBM Mainframe Discussion List
No, not me... My main contributions to the CBT are found in your stuff --
FILE452. But thanks for the thought.
Greg Shirey
Ben E. Keith Company
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf
Of Dan D
Sent: Tuesday, May 17, 2016
I find the SDSF interface a little *clunky* and awkward. I prefer the CMD
REXX from CBT (Greg Shirey maybe) ...
/* rexx */
Address TSO
Arg con_command
Rob
I understand now however the second address space is a started task
So I don't have axlist,tklist,lxlist available
I guess thinking about it the design was a good
Idea as we shouldn't be "hacking" into system
Address spaces
Sent from my iPhone
> On May 17, 2016, at 8:22 AM, Rob Scott
Nathan Astle wrote:
>During a restore of a Dataset I see the below keywords along with the ADR
>Messages :
>RI01
>RI01
... snipped ...
>Could someone please point me to a manual where I can get the explanation for
>the above keywords ?
That is Diagnostic information used by IBM service
If you are in control of both address spaces (ie the second ASID is not
"foreign"), there are all sorts of non-common memory sharing options available
to you, including (but not limited to) :
(1) ASID1 starting ASID2 using ASCRE - you can get an official cross-memory
bind and then use ALETs to
Or, less kindly, learnt DFSORT / ICETOOL. It's a very useful utility and
pervasive (if one counts Syncsort as the overlap in syntax and semantics
approaches 100%).
It's really not that difficult.
Cheers, Martin
Sent from my iPad
> On 17 May 2016, at 11:51, Elardus Engelbrecht
Hello all,
The agenda for the Large Systems Working Group has been finalised.
Please find the agenda below:
http://bit.ly/1Tkyf1O
To register for the event please do so here:
http://lsx.gse.org.uk/content/content_event_register.php?id=15
Thanks.
It turns out that "OC" is part of OPS/MVS, so I now can document the job.
Tony Thigpen
Jeremy Nicoll wrote on 05/17/2016 07:30 AM:
On Tue, 17 May 2016, at 12:19, Tony Thigpen wrote:
OK, dumb question time.
My job is working with some JCL I found in another job:
//STEP01 EXEC
So the face that a SRB is running in space #2
Would automatically mKe it swapped in ?
If I had to go thru all that trouble of writing
A routine I would rather XMEM post space #2 to do
A SYSEVENT TRANSWAP
Sent from my iPhone
> On May 15, 2016, at 3:59 PM, Ed Jaffe
Hi,
During a restore of a Dataset I see the below keywords along with the
ADR Messages :
RI01
RI01
PRIME
STEND
TDDS
NEWDS
TDNVS
TDLOG
NEWDS
TDNVS
TDLOG
TDLOG
STEND
CLTSK
DSSU
Could someone please point me to a manual where I can get the explanation
for the above keywords ?
Nathan
John the bottom line is that, while it may not be a security exposure or a
system integrity issue, it is an issue from the standpoint of auditors and
centralized security organizations who dictate policy. Whether it is a private
or public environment, we all have these organizations who have
OK, dumb question time.
My job is working with some JCL I found in another job:
//STEP01 EXEC PGM=IKJEFT1A,REGION=0M
//SYSPRINT DD SYSOUT=*
//SYSTSPRT DD SYSOUT=*
//SYSTERM DD SYSOUT=*
//SYSTSOUT DD SYSOUT=*
//SYSTSIN DD *
OC C('DS QD,TYPE=ALL,ONLINE')
/*
But, I want to look at the "OC"
From the IP Configuration Reference
Step 3: Configure VMCF and TNF
The Pascal socket interface uses the IUCV/VMCF services for a limited set of
inter-address space communication flows. As a result, if you are using any
applications (provided by IBM or others) that use the Pascal socket API, you
Ravi Gaur wrote:
>Since I am not that good on Sort programming could somebody throw a code which
>could help in Merging two files which has common BY variable..(I generally do
>it with SAS) however where this required it's not licensedso it's possible
>via rexx however for millions of
I'd research DFSORT JOINKEYS.
Cheers, Martin
Sent from my iPad
> On 17 May 2016, at 08:13, Ravi Gaur wrote:
>
> Since I am not that good on Sort programming could somebody throw a code
which could help in Merging two files which has common BY variable..(I
generally
Since I am not that good on Sort programming could somebody throw a code which
could help in Merging two files which has common BY variable..(I generally do
it with SAS) however where this required it's not licensedso it's possible
via rexx however for millions of records that's damn
48 matches
Mail list logo